Lucene search

K
cve[email protected]CVE-2004-0592
HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-0592

2004-12-3105:00:00
NVD-CWE-Other
web.nvd.nist.gov
21
cve-2004-0592
denial of service
suse linux
netfilter subsystem
ipv6
usagi patches
iptables
tcp options rules
cpu consumption
infinite loop
nvd

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

84.7%

The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type, a similar flaw to CVE-2004-0626.

CPENameOperatorVersion
suse:suse_linuxsuse suse linuxeq2.6.5

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

84.7%